@sap-ux/create 1.4.18 → 1.5.1

package/README.md

@@ -581,3 +581,18 @@ Options:
 - `--client <string>` - SAP client number (optional).
 - `--json` - Output as JSON, which is useful for automation and MCP integrations.
 
+--------------------------------
+
+## [`migrate`](#migrate)
+
+Migrate legacy WebIDE Fiori project to modern Fiori tools format. In BAS, a destination is required. Outside BAS, hostname and client are required; destination is optional.
+
+Options:
+- `-d, --destination <name>` - SAP System destination name (required in BAS)
+- `-s, --sap-system-name <name>` - SAP System name (alias for destination)
+- `-H, --hostname <host>` - Backend hostname (required outside BAS unless resolved from a saved system)
+- `-c, --client <client>` - SAP Client (required outside BAS unless resolved from destination or saved system)
+- `-u, --ui5-version <version>` - UI5 version (defaults to source project version)
+- `-f, --force` - Force migration even if project is already a Fiori tools project
+- `-n, --skip-install` - Skip the `npm install` step after migration
+

package/dist/cli/add/cds-plugin-ui.js

@@ -48,7 +48,9 @@ async function addCdsPluginUi5(basePath, simulate, skipInstall) {
             }
             else {
                 logger.debug('Running npm install command');
-                runNpmInstallCommand(basePath);
+                runNpmInstallCommand(basePath, [], { logger }).catch(() => {
+                    // Error already logged by runNpmInstallCommand
+                });
             }
         }
     }

package/dist/cli/add/eslint-config.js

@@ -48,7 +48,9 @@ async function addEslintConfig(basePath, simulate, config, skipInstall = false)
             }
             else {
                 logger.info(`Executing \`npm install\`.`);
-                runNpmInstallCommand(basePath, undefined, { logger });
+                runNpmInstallCommand(basePath, undefined, { logger }).catch(() => {
+                    // Error already logged by runNpmInstallCommand
+                });
             }
         }
     }

package/dist/cli/add/mockserver-config.js

@@ -62,7 +62,11 @@ async function addMockserverConfig(basePath, simulate, skipInstall, interactive)
             }
             else {
                 logger.debug('Running npm install command');
-                runNpmInstallCommand(basePath, ['--save-dev', '@sap-ux/ui5-middleware-fe-mockserver']);
+                runNpmInstallCommand(basePath, ['--save-dev', '@sap-ux/ui5-middleware-fe-mockserver'], {
+                    logger
+                }).catch(() => {
+                    // Error already logged by runNpmInstallCommand
+                });
             }
         }
     }

package/dist/cli/convert/eslint-config.js

@@ -60,7 +60,9 @@ async function convertEslintConfig(basePath, simulate, config, skipInstall = fal
                     });
                     logger.info('npm uninstall completed successfully.');
                     logger.info(`Executing \`npm install\`.`);
-                    runNpmInstallCommand(basePath, undefined, { logger });
+                    runNpmInstallCommand(basePath, undefined, { logger }).catch(() => {
+                        // Error already logged by runNpmInstallCommand
+                    });
                 }
                 catch (error) {
                     logger.error(`npm command failed. '${error.message}'`);

package/dist/cli/generate/adaptation-project.js

@@ -57,7 +57,7 @@ async function generateAdaptationProject(basePath, defaults, useDefaults, simula
         if (!simulate) {
             await new Promise((resolve) => fs.commit(resolve));
             if (!skipInstall) {
-                runNpmInstallCommand(basePath);
+                await runNpmInstallCommand(basePath);
                 logger.info('Executed npm install');
             }
         }

package/dist/cli/get/system.js

@@ -1,8 +1,8 @@
 import { isAppStudio } from '@sap-ux/btp-utils';
-import { getService, BackendSystemKey } from '@sap-ux/store';
-import { NullTransport, ToolsLogger } from '@sap-ux/logger';
+import { BackendSystemKey } from '@sap-ux/store';
 import { getLogger } from '../../tracing/index.js';
 import { findSystemByUrl } from '../utils/system-lookup.js';
+import { getSystemService, toPublicView } from '../utils/system-store.js';
 /**
  * Add the "get system" subcommand to a passed command.
  * Retrieves details of a saved backend system identified by its URL and optional client.
@@ -38,14 +38,7 @@ async function getSystem(url, client, asJson) {
             logger.error('System management using the CLI is not supported in SAP Business Application Studio. Use the built-in system management instead.');
             return;
         }
-        // When emitting JSON, pass a silent logger to getService so that
-        // @sap-ux/store diagnostic messages do not appear on stdout before the
-        // JSON payload and break piped consumers.
-        const storeLogger = asJson ? new ToolsLogger({ transports: [new NullTransport()] }) : logger;
-        const service = await getService({
-            entityName: 'system',
-            logger: storeLogger
-        });
+        const service = await getSystemService(asJson);
         // Use smart lookup to handle client mismatch scenarios
         const system = await findSystemByUrl(url, client, service);
         if (!system) {
@@ -53,16 +46,7 @@ async function getSystem(url, client, asJson) {
             logger.error(`System not found: ${key.getId()}`);
             return;
         }
-        const publicView = {
-            name: system.name,
-            url: system.url,
-            client: system.client,
-            systemType: system.systemType,
-            authenticationType: system.authenticationType,
-            connectionType: system.connectionType,
-            userDisplayName: system.userDisplayName,
-            hasSensitiveData: system.hasSensitiveData
-        };
+        const publicView = toPublicView(system);
         if (asJson) {
             // Use process.stdout.write so the output is pure JSON with no logger
             // prefixes or timestamps — required for machine consumption and piping.

package/dist/cli/index.js

@@ -13,6 +13,7 @@ import { getConvertCommands } from './convert/index.js';
 import { getListCommands } from './list/index.js';
 import { getGetCommands } from './get/index.js';
 import { getUpdateCommands } from './update/index.js';
+import { getMigrateCommand } from './migrate/index.js';
 /*
  * We've chosen 'commander' over 'minimist' and 'yargs' for this CLI implementation. Reasons:
  * (if it still up: https://npmtrends.com/commander-vs-minimist-vs-yargs)
@@ -34,7 +35,7 @@ export async function handleCreateFioriCommand(argv) {
         // Initialize i18n before executing commands
         await initI18n();
         const program = getCommanderProgram();
-        program.parse(argv);
+        await program.parseAsync(argv);
     }
     catch (error) {
         // Commander report meaningful error messages, output only if log level is set to debug
@@ -116,6 +117,8 @@ function getCommanderProgram() {
                     Usage: \`npx --yes @sap-ux/create@latest get [subcommand] [options]\`
                     The available subcommands are: ${getFeatureSummary(getCommands.commands)}\n`);
     program.addCommand(getCommands);
+    // Handler for create-fiori migrate ..
+    program.addCommand(getMigrateCommand());
     return program;
 }
 /**

package/dist/cli/list/system.js

@@ -1,7 +1,6 @@
 import { isAppStudio } from '@sap-ux/btp-utils';
-import { getService } from '@sap-ux/store';
-import { NullTransport, ToolsLogger } from '@sap-ux/logger';
 import { getLogger } from '../../tracing/index.js';
+import { getSystemService, toPublicView } from '../utils/system-store.js';
 /**
  * Add the "list system" subcommand to a passed command.
  * Lists all backend systems saved in the store (~/.fioritools).
@@ -33,14 +32,7 @@ async function listSystems(asJson) {
             logger.error('System management using the CLI is not supported in SAP Business Application Studio. Use the built-in system management instead.');
             return;
         }
-        // When emitting JSON, pass a silent logger to getService so that
-        // @sap-ux/store diagnostic messages (e.g. "Using KeyStoreManager…") do
-        // not appear on stdout before the JSON payload and break piped consumers.
-        const storeLogger = asJson ? new ToolsLogger({ transports: [new NullTransport()] }) : logger;
-        const service = await getService({
-            entityName: 'system',
-            logger: storeLogger
-        });
+        const service = await getSystemService(asJson);
         // Pass no filter so all systems are returned regardless of connection type
         const systems = await service.getAll();
         if (asJson) {
@@ -65,24 +57,6 @@ async function listSystems(asJson) {
         logger.debug(error);
     }
 }
-/**
- * Returns a view of a system with only non-sensitive fields.
- *
- * @param system - the backend system
- * @returns non-sensitive system data
- */
-function toPublicView(system) {
-    return {
-        name: system.name,
-        url: system.url,
-        client: system.client,
-        systemType: system.systemType,
-        authenticationType: system.authenticationType,
-        connectionType: system.connectionType,
-        userDisplayName: system.userDisplayName,
-        hasSensitiveData: system.hasSensitiveData
-    };
-}
 /**
  * Prints a single system to the logger in human-readable format.
  *

package/dist/cli/migrate/index.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+/**
+ * Returns the 'migrate' command for the commander program.
+ *
+ * @returns - commander command
+ */
+export declare function getMigrateCommand(): Command;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/migrate/index.js

@@ -0,0 +1,618 @@
+import { Command } from 'commander';
+import { resolve, basename } from 'node:path';
+import { existsSync, readFileSync } from 'node:fs';
+import prompts from 'prompts';
+import { ProjectAccess, ProjectMigrator, initI18n as initMigrationI18n } from '@sap-ux/fiori-migration-writer';
+import { DestinationProxyType, isAppStudio, listDestinations } from '@sap-ux/btp-utils';
+import { isInternalFeaturesSettingEnabled } from '@sap-ux/feature-toggle';
+import { getService } from '@sap-ux/store';
+import { execNpmCommand } from '@sap-ux/project-access';
+import { validateClient as validateClientInput, validateSpecialChars as validateSpecialCharsInput } from '@sap-ux/project-input-validator';
+import { getLogger } from '../../tracing/index.js';
+import { findSystemByUrl } from '../utils/system-lookup.js';
+import { t } from '../../i18n.js';
+import { writeMigrationLog, getMigrationLogsDirectory } from './traceability.js';
+/**
+ * Helper to convert validator result (boolean | string) to throw-on-error format.
+ * Project input validators return true or error message; this converts to exception.
+ *
+ * @param validatorResult - result from @sap-ux/project-input-validator function
+ * @param value - the validated value to return on success
+ * @returns validated value
+ * @throws Error if validation failed
+ */
+function enforceValidation(validatorResult, value) {
+    if (validatorResult === true) {
+        return value;
+    }
+    // If not true, must be false or an error message string
+    throw new Error(typeof validatorResult === 'string' ? validatorResult : 'Validation failed');
+}
+/**
+ * Validate a path to prevent directory traversal attacks.
+ *
+ * @param path - path to validate
+ * @returns validated absolute path
+ * @throws Error if path contains unsafe characters or doesn't exist
+ */
+function validatePath(path) {
+    const resolved = resolve(path);
+    // Reject control characters and shell metacharacters
+    if (/[\0\r\n`$|&;<>]/.test(resolved)) {
+        throw new Error(t('migrate.validation.pathUnsafe'));
+    }
+    // Ensure it's an existing directory
+    if (!existsSync(resolved)) {
+        throw new Error(t('migrate.validation.pathNotExists', { path }));
+    }
+    return resolved;
+}
+/**
+ * Validate a destination/system name to prevent injection attacks.
+ * Uses @sap-ux/project-input-validator for consistent validation.
+ *
+ * @param destination - destination name to validate
+ * @returns validated destination
+ * @throws Error if destination contains invalid characters
+ */
+function validateDestination(destination) {
+    // Allow alphanumeric, underscores, hyphens (typical SAP destination/system names)
+    return enforceValidation(validateSpecialCharsInput(destination, '^[a-zA-Z0-9_-]+$'), destination);
+}
+/**
+ * Validate a hostname to prevent URL injection.
+ *
+ * @param hostname - hostname to validate
+ * @returns validated hostname
+ * @throws Error if hostname contains unsafe characters
+ */
+function validateHostname(hostname) {
+    const strippedHostname = hostname.replace(/^https?:\/\//i, '');
+    // RFC-compliant hostname with an optional port.
+    // Simplified: alphanumeric + hyphens, no leading/trailing hyphens, optional port
+    if (!/^[a-zA-Z\d]([a-zA-Z\d-]*[a-zA-Z\d])?(\.[a-zA-Z\d]([a-zA-Z\d-]*[a-zA-Z\d])?)*(:\d+)?$/.test(strippedHostname)) {
+        throw new Error(t('migrate.validation.hostnameInvalid'));
+    }
+    return strippedHostname;
+}
+function getHostnameFromUrl(url) {
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Validate a SAP client number.
+ * Uses @sap-ux/project-input-validator for consistent validation.
+ *
+ * @param client - client number to validate
+ * @returns validated client
+ * @throws Error if client is not a 3-digit number
+ */
+function validateClient(client) {
+    // SAP clients are 3-digit numbers (000-999)
+    return enforceValidation(validateClientInput(client), client);
+}
+/**
+ * Validate a UI5 version string to prevent URL injection.
+ *
+ * @param version - version string to validate
+ * @returns validated version
+ * @throws Error if version contains unsafe characters
+ */
+function validateUI5Version(version) {
+    // Allow semantic version format: digits, dots, optional snapshot suffix (case-insensitive)
+    if (!/^\d+\.\d+\.\d+(-snapshot)?$/i.test(version)) {
+        throw new Error(t('migrate.validation.ui5VersionInvalid'));
+    }
+    return version;
+}
+/**
+ * Helper to create a required text validation function.
+ *
+ * @param fieldName - name of the field for error message
+ * @returns validation function
+ */
+function createRequiredValidator(fieldName) {
+    return (value) => (value ? true : t('migrate.validation.fieldRequired', { fieldName }));
+}
+/**
+ * Helper to prompt for a required text input.
+ *
+ * @param name - prompt name
+ * @param message - prompt message
+ * @param fieldName - field name for validation error
+ * @returns user input
+ */
+async function promptRequiredText(name, message, fieldName) {
+    const response = await prompts({
+        type: 'text',
+        name,
+        message,
+        validate: createRequiredValidator(fieldName)
+    });
+    if (response[name] === undefined) {
+        throw new Error(t('migrate.validation.operationCancelled'));
+    }
+    return response[name];
+}
+/**
+ * Helper to prompt for confirmation.
+ *
+ * @param name - prompt name
+ * @param message - prompt message
+ * @param initial - initial value
+ * @returns confirmation response
+ */
+async function promptConfirm(name, message, initial) {
+    const response = await prompts({ type: 'confirm', name, message, initial });
+    if (response[name] === undefined) {
+        throw new Error(t('migrate.validation.operationCancelled'));
+    }
+    return response[name];
+}
+/**
+ * Returns the 'migrate' command for the commander program.
+ *
+ * @returns - commander command
+ */
+export function getMigrateCommand() {
+    return new Command('migrate')
+        .argument('[project-path]')
+        .description(t('migrate.command.description'))
+        .option('-d, --destination <name>', t('migrate.command.options.destination'))
+        .option('-s, --sap-system-name <name>', t('migrate.command.options.sapSystemName'))
+        .option('-H, --hostname <host>', t('migrate.command.options.hostname'))
+        .option('-c, --client <client>', t('migrate.command.options.client'))
+        .option('-u, --ui5-version <version>', t('migrate.command.options.ui5Version'))
+        .option('-f, --force', t('migrate.command.options.force'))
+        .option('-n, --skip-install', t('migrate.command.options.skipInstall'))
+        .action(async (projectPath, options) => {
+        try {
+            await migrate(projectPath, options);
+        }
+        catch (error) {
+            const logger = getLogger();
+            logger.error(error instanceof Error ? error.message : String(error));
+            process.exit(1);
+        }
+    });
+}
+/**
+ * Get project path from user or use provided path.
+ *
+ * @param projectPath - optional project path from command line
+ * @returns resolved project path
+ */
+async function getProjectPath(projectPath) {
+    let resolvedPath = projectPath ? validatePath(projectPath) : process.cwd();
+    if (!projectPath) {
+        const confirmPath = await promptConfirm('confirmPath', t('migrate.prompts.confirmCurrentDir', { path: resolvedPath }), true);
+        if (!confirmPath) {
+            const customPath = await promptRequiredText('customPath', t('migrate.prompts.enterPath'), t('migrate.prompts.enterPathField'));
+            resolvedPath = validatePath(customPath);
+        }
+    }
+    return resolvedPath;
+}
+/**
+ * Check if project needs force flag for migration.
+ * Uses package.json devDependencies to detect Fiori tools projects.
+ *
+ * @param resolvedPath - project path
+ * @param force - force flag from options
+ * @returns true if migration should proceed, false otherwise
+ */
+async function checkForceRequired(resolvedPath, force) {
+    const logger = getLogger();
+    // Check for Fiori tools indicators in package.json
+    let isToolsProject = false;
+    try {
+        const packageJsonPath = resolve(resolvedPath, 'package.json');
+        if (existsSync(packageJsonPath)) {
+            const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+            const devDeps = packageJson.devDependencies || {};
+            // Fiori tools projects have @sap/ux-* dev dependencies
+            // Note: @ui5/* packages like @ui5/cli are generic build tools, not Fiori-specific
+            isToolsProject = Object.keys(devDeps).some((dep) => dep.startsWith('@sap/ux-'));
+        }
+    }
+    catch {
+        // If we can't read package.json, assume not a tools project
+    }
+    if (isToolsProject && !force) {
+        logger.warn(t('migrate.prompts.alreadyMigrated'));
+        const confirmForce = await promptConfirm('confirmForce', t('migrate.prompts.forceConfirm'), false);
+        if (!confirmForce) {
+            logger.info(t('migrate.prompts.cancelled'));
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Get destination or hostname from user or options.
+ *
+ * @param options - command options
+ * @returns object with destination and hostname
+ */
+async function getDestinationOrHostname(options) {
+    const appStudio = isAppStudio();
+    let destination = options.destination ?? options.sapSystemName;
+    let hostname = options.hostname ? validateHostname(options.hostname) : undefined;
+    // Validate destination if provided via CLI
+    if (destination) {
+        destination = validateDestination(destination);
+    }
+    if (appStudio) {
+        if (!destination) {
+            destination = validateDestination(await promptRequiredText('dest', t('migrate.prompts.enterBASDestination'), t('migrate.prompts.destinationField')));
+        }
+    }
+    else if (!hostname && !destination) {
+        const useDestination = await promptConfirm('useDestination', t('migrate.prompts.useDestination'), true);
+        if (useDestination) {
+            const dest = await promptRequiredText('dest', t('migrate.prompts.enterBTPDestination'), t('migrate.prompts.destinationField'));
+            destination = validateDestination(dest);
+        }
+        if (!destination) {
+            const host = await promptRequiredText('host', t('migrate.prompts.enterHostname'), t('migrate.prompts.hostnameField'));
+            hostname = validateHostname(host);
+        }
+    }
+    else if (!hostname && destination) {
+        // Outside BAS with destination but no hostname - prompt for hostname
+        const host = await promptRequiredText('host', t('migrate.prompts.enterHostname'), t('migrate.prompts.hostnameField'));
+        hostname = validateHostname(host);
+    }
+    return { destination, hostname };
+}
+/**
+ * Get optional client parameter.
+ *
+ * @param optionClient - client from command options
+ * @returns client value or undefined
+ */
+async function getClient(optionClient) {
+    if (optionClient) {
+        return validateClient(optionClient);
+    }
+    if (!isAppStudio()) {
+        return validateClient(await promptRequiredText('clientValue', t('migrate.prompts.enterClient'), t('migrate.prompts.clientField')));
+    }
+    const response = await prompts({
+        type: 'text',
+        name: 'clientValue',
+        message: t('migrate.prompts.enterClientOptional'),
+        initial: ''
+    });
+    const client = response.clientValue;
+    return client ? validateClient(client) : undefined;
+}
+/**
+ * Get UI5 version parameter.
+ *
+ * @param optionVersion - UI5 version from command options
+ * @returns UI5 version or undefined
+ */
+async function getUI5Version(optionVersion) {
+    if (optionVersion) {
+        return validateUI5Version(optionVersion);
+    }
+    // Non-interactive: use project default
+    if (!process.stdin.isTTY) {
+        return undefined;
+    }
+    const response = await prompts({
+        type: 'text',
+        name: 'version',
+        message: t('migrate.prompts.enterUI5Version'),
+        initial: ''
+    });
+    const version = response.version;
+    return version ? validateUI5Version(version) : undefined;
+}
+/**
+ * Resolve a legacy project's backend to a saved system or BAS destination.
+ *
+ * @param projectPath - legacy project root
+ * @returns matched system, if available
+ */
+async function findMigrationSystem(projectPath) {
+    const logger = getLogger();
+    try {
+        const { projectInfo } = await ProjectAccess.getProjectInfo(projectPath);
+        if (isAppStudio()) {
+            return await findBASDestination(projectInfo.destination, projectInfo.hostname);
+        }
+        if (!projectInfo.hostname) {
+            return undefined;
+        }
+        const service = await getService({ entityName: 'system', logger });
+        const savedSystem = await findSystemByUrl(projectInfo.hostname, projectInfo.sapClient || undefined, service);
+        return savedSystem ? { ...savedSystem, scp: false } : undefined;
+    }
+    catch (error) {
+        logger.debug(`Unable to resolve a migration system: ${error.message}`);
+        return undefined;
+    }
+}
+/**
+ * Match the legacy project backend to a BAS destination.
+ *
+ * @param destinationName - destination parsed from the legacy project
+ * @param hostname - backend hostname parsed from the legacy project
+ * @returns matching BAS destination, if available
+ */
+async function findBASDestination(destinationName, hostname) {
+    const destinations = await listDestinations();
+    const systems = Object.values(destinations).map((destination) => toMigrationSystem(destination));
+    const destinationMatch = destinationName ? systems.find((system) => system.name === destinationName) : undefined;
+    if (destinationMatch) {
+        return destinationMatch;
+    }
+    if (!hostname) {
+        return undefined;
+    }
+    try {
+        const normalizedHostname = /^https?:\/\//i.test(hostname) ? hostname : `https://${hostname}`;
+        const sourceOrigin = new URL(normalizedHostname).origin;
+        const matches = systems.filter((system) => new URL(system.url).origin === sourceOrigin);
+        if (matches.length === 1) {
+            return matches[0];
+        }
+        if (matches.length > 1) {
+            const answer = await prompts({
+                type: 'select',
+                name: 'system',
+                message: t('migrate.prompts.selectBASDestination'),
+                choices: matches.map((system) => ({
+                    title: t('migrate.prompts.destinationChoice', {
+                        name: system.name,
+                        client: system.client || t('migrate.prompts.defaultClient')
+                    }),
+                    value: system
+                }))
+            });
+            if (answer.system === undefined) {
+                throw new Error(t('migrate.validation.operationCancelled'));
+            }
+            return answer.system;
+        }
+    }
+    catch (error) {
+        // Re-throw cancellation errors so the user can abort
+        if (error.message === t('migrate.validation.operationCancelled')) {
+            throw error;
+        }
+        // Invalid source or destination URLs cannot be matched safely.
+    }
+    return undefined;
+}
+function toMigrationSystem(destination) {
+    return {
+        name: destination.Name,
+        url: destination.Host,
+        client: destination['sap-client'] || undefined,
+        scp: destination.ProxyType !== DestinationProxyType.ON_PREMISE
+    };
+}
+/**
+ * Execute npm install and capture errors, warnings, and security issues.
+ *
+ * @param resolvedPath - project path
+ * @param logger - logger instance
+ * @returns npm install result with captured messages
+ */
+async function executeNpmInstall(resolvedPath, logger) {
+    const npmErrors = [];
+    const npmSecurityWarnings = [];
+    try {
+        await execNpmCommand(['install'], {
+            cwd: resolvedPath,
+            throwOnError: true,
+            logger: {
+                info: (msg) => {
+                    const message = typeof msg === 'string' ? msg : JSON.stringify(msg);
+                    // Capture security vulnerabilities
+                    if (message.toLowerCase().includes('vulnerabilities') ||
+                        message.toLowerCase().includes('security')) {
+                        npmSecurityWarnings.push(message);
+                    }
+                    logger.info(msg);
+                },
+                error: (msg) => {
+                    const message = typeof msg === 'string' ? msg : JSON.stringify(msg);
+                    npmErrors.push(message);
+                    logger.error(msg);
+                },
+                debug: (msg) => {
+                    logger.debug(msg);
+                }
+            }
+        });
+        logger.info(t('npm.installSuccess'));
+        return {
+            success: true,
+            ...(npmSecurityWarnings.length > 0 && { securityWarnings: npmSecurityWarnings })
+        };
+    }
+    catch (error) {
+        const installError = error;
+        npmErrors.push(installError.message);
+        logger.error(t('migrate.status.installFailed'));
+        return {
+            success: false,
+            errors: npmErrors,
+            ...(npmSecurityWarnings.length > 0 && { securityWarnings: npmSecurityWarnings })
+        };
+    }
+}
+/**
+ * Resolve migration options with fallbacks from matched system.
+ *
+ * @param options
+ * @param matchedSystem
+ */
+function resolveMigrationOptions(options, matchedSystem) {
+    return {
+        ...options,
+        destination: options.destination ?? options.sapSystemName ?? matchedSystem?.name,
+        hostname: options.hostname ?? (matchedSystem?.url ? getHostnameFromUrl(matchedSystem.url) : undefined),
+        client: options.client ??
+            matchedSystem?.client ??
+            (ProjectAccess.getClientFromDestinationName(options.destination ?? options.sapSystemName ?? matchedSystem?.name ?? '') ||
+                undefined)
+    };
+}
+/**
+ * Calculate base URI for migration.
+ * Priority: hostname > matchedSystem.url (if no hostname override) > destination (BAS only).
+ *
+ * @param destination
+ * @param hostname
+ * @param matchedSystem
+ * @param hostnameOverride
+ */
+function calculateBaseUri(destination, hostname, matchedSystem, hostnameOverride) {
+    // Start with destination-based URI: BAS routes by destination name via the proxy;
+    // outside BAS only a full hostname URL is valid.
+    let baseUri = isAppStudio() && destination ? `/${destination}` : '';
+    // Override with matched system URL if present and no hostname override
+    if (matchedSystem?.url && !hostnameOverride) {
+        baseUri = matchedSystem.url;
+    }
+    // Override with hostname if provided (takes precedence)
+    else if (hostname) {
+        baseUri = `https://${hostname}`;
+    }
+    return baseUri;
+}
+/**
+ * Log migration messages by type.
+ *
+ * @param messages
+ * @param logger
+ */
+function logMigrationMessages(messages, logger) {
+    logger.info(t('migrate.status.messages'));
+    messages.forEach((msg) => {
+        const logMessage = `  ${msg.type}: ${msg.description}`;
+        if (msg.type === 'ERROR') {
+            logger.error(logMessage);
+        }
+        else if (msg.type === 'WARNING') {
+            logger.warn(logMessage);
+        }
+        else {
+            logger.info(logMessage);
+        }
+    });
+}
+/**
+ * Handle successful migration - install dependencies and write log.
+ *
+ * @param result
+ * @param options
+ * @param resolvedPath
+ * @param migrationLogEntry
+ * @param logger
+ */
+async function handleMigrationSuccess(result, options, resolvedPath, migrationLogEntry, logger) {
+    logger.info(t('migrate.status.success'));
+    if (result.messages?.length) {
+        logMigrationMessages(result.messages, logger);
+    }
+    if (options.skipInstall) {
+        logger.warn(t('migrate.status.skipInstallWarning'));
+    }
+    else {
+        logger.info(t('migrate.status.installing'));
+        migrationLogEntry.npmInstall = await executeNpmInstall(resolvedPath, logger);
+    }
+    writeMigrationLog(migrationLogEntry, logger);
+    logger.info(`Migration log location: ${getMigrationLogsDirectory()}`);
+}
+/**
+ * Handle failed migration - write log and throw error.
+ *
+ * @param result
+ * @param migrationLogEntry
+ * @param logger
+ */
+function handleMigrationFailure(result, migrationLogEntry, logger) {
+    logger.error(t('migrate.status.failed'));
+    if (result.messages?.length) {
+        result.messages.forEach((msg) => logger.error(`  ${msg.description}`));
+    }
+    writeMigrationLog(migrationLogEntry, logger);
+    logger.info(`Migration log location: ${getMigrationLogsDirectory()}`);
+    throw new Error(t('migrate.status.failedError'));
+}
+/**
+ * Execute the migration command.
+ *
+ * @param projectPath - path to the project to migrate
+ * @param options - command options
+ */
+async function migrate(projectPath, options) {
+    const logger = getLogger();
+    // 1. Get or prompt for project path
+    const resolvedPath = await getProjectPath(projectPath);
+    logger.info(t('migrate.status.migratingAt', { path: resolvedPath }));
+    // 2. Check if force flag is required
+    const shouldProceed = await checkForceRequired(resolvedPath, options.force ?? false);
+    if (!shouldProceed) {
+        return;
+    }
+    const matchedSystem = await findMigrationSystem(resolvedPath);
+    // 3. Resolve options with fallbacks
+    const resolvedOptions = resolveMigrationOptions(options, matchedSystem);
+    const { destination, hostname } = await getDestinationOrHostname(resolvedOptions);
+    // 4. Get optional client
+    const client = await getClient(resolvedOptions.client);
+    // 5. Get UI5 version
+    const ui5Version = await getUI5Version(options.ui5Version);
+    const sapClient = client ?? (destination ? ProjectAccess.getClientFromDestinationName(destination) || undefined : undefined);
+    // 6. Execute migration
+    logger.info(t('migrate.status.starting'));
+    const baseUri = calculateBaseUri(destination, hostname, matchedSystem, !!options.hostname);
+    const ui5SnapshotUrl = ui5Version ? `https://ui5.sap.com/${ui5Version}` : '';
+    const migrationHostname = hostname ?? (matchedSystem?.url ? getHostnameFromUrl(matchedSystem.url) : undefined);
+    // Initialize i18n for proper error messages
+    await initMigrationI18n();
+    const internalToggle = isInternalFeaturesSettingEnabled();
+    // Load project info first, then merge CLI overrides
+    const migrationProjectInfo = sapClient || destination || hostname
+        ? {
+            ...(sapClient && { sapClient }),
+            ...(destination && { destination }),
+            ...(migrationHostname && { hostname: migrationHostname }),
+            ...(!options.destination && !options.sapSystemName && matchedSystem && { scp: matchedSystem.scp })
+        }
+        : undefined;
+    const result = await ProjectMigrator.migrate({
+        projectRoot: resolvedPath,
+        baseUri,
+        ui5SnapshotUrl,
+        importProjectInfo: migrationProjectInfo,
+        internalToggle: internalToggle || undefined
+    });
+    // Prepare migration log entry
+    const migrationLogEntry = {
+        timestamp: new Date().toISOString(),
+        projectPath: resolvedPath,
+        projectName: basename(resolvedPath),
+        migrationMessages: result.messages || [],
+        migrationSuccess: result.result
+    };
+    if (result.result) {
+        await handleMigrationSuccess(result, options, resolvedPath, migrationLogEntry, logger);
+    }
+    else {
+        handleMigrationFailure(result, migrationLogEntry, logger);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/migrate/traceability.d.ts

@@ -0,0 +1,43 @@
+import type { Logger } from '@sap-ux/logger';
+export interface MigrationLogEntry {
+    timestamp: string;
+    projectPath: string;
+    projectName: string;
+    migrationMessages: Array<{
+        type: string;
+        description: string;
+    }>;
+    npmInstall?: {
+        success: boolean;
+        errors?: string[];
+        warnings?: string[];
+        securityWarnings?: string[];
+    };
+    migrationSuccess: boolean;
+}
+/**
+ * Get the migration logs directory.
+ *
+ * @returns path to migration logs directory
+ */
+export declare function getMigrationLogsDirectory(): string;
+/**
+ * Ensure the migration logs directory exists.
+ */
+export declare function ensureMigrationLogsDirectory(): void;
+/**
+ * Generate a unique log file name for a migration.
+ *
+ * @param projectName - name of the migrated project
+ * @param timestamp - ISO timestamp string
+ * @returns log file name
+ */
+export declare function generateLogFileName(projectName: string, timestamp: string): string;
+/**
+ * Write migration log to file.
+ *
+ * @param logEntry - migration log entry
+ * @param logger - optional logger for feedback
+ */
+export declare function writeMigrationLog(logEntry: MigrationLogEntry, logger?: Logger): void;
+//# sourceMappingURL=traceability.d.ts.map

package/dist/cli/migrate/traceability.js

@@ -0,0 +1,52 @@
+import { join } from 'node:path';
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { getFioriToolsDirectory } from '@sap-ux/store';
+/**
+ * Get the migration logs directory.
+ *
+ * @returns path to migration logs directory
+ */
+export function getMigrationLogsDirectory() {
+    const fioriToolsDir = getFioriToolsDirectory();
+    return join(fioriToolsDir, 'migration-logs');
+}
+/**
+ * Ensure the migration logs directory exists.
+ */
+export function ensureMigrationLogsDirectory() {
+    const logsDir = getMigrationLogsDirectory();
+    if (!existsSync(logsDir)) {
+        mkdirSync(logsDir, { recursive: true });
+    }
+}
+/**
+ * Generate a unique log file name for a migration.
+ *
+ * @param projectName - name of the migrated project
+ * @param timestamp - ISO timestamp string
+ * @returns log file name
+ */
+export function generateLogFileName(projectName, timestamp) {
+    const cleanTimestamp = timestamp.replace(/[:.]/g, '-').replace(/Z$/, '');
+    return `${projectName}_${cleanTimestamp}.json`;
+}
+/**
+ * Write migration log to file.
+ *
+ * @param logEntry - migration log entry
+ * @param logger - optional logger for feedback
+ */
+export function writeMigrationLog(logEntry, logger) {
+    try {
+        ensureMigrationLogsDirectory();
+        const logsDir = getMigrationLogsDirectory();
+        const logFileName = generateLogFileName(logEntry.projectName, logEntry.timestamp);
+        const logFilePath = join(logsDir, logFileName);
+        writeFileSync(logFilePath, JSON.stringify(logEntry, null, 2), 'utf-8');
+        logger?.info(`Migration log written to: ${logFilePath}`);
+    }
+    catch (error) {
+        logger?.warn(`Failed to write migration log: ${error.message}`);
+    }
+}
+//# sourceMappingURL=traceability.js.map

package/dist/cli/utils/system-store.d.ts

@@ -0,0 +1,18 @@
+import type { BackendSystem, BackendSystemKey } from '@sap-ux/store';
+/**
+ * Create a store service for BackendSystem entities.
+ * When `silentForJson` is true, uses a NullTransport logger so that store
+ * diagnostic messages do not appear on stdout before a JSON payload.
+ *
+ * @param silentForJson - suppress store log output when true
+ * @returns configured store service
+ */
+export declare function getSystemService(silentForJson: boolean): Promise<import("@sap-ux/store").Service<BackendSystem, BackendSystemKey>>;
+/**
+ * Returns a view of a BackendSystem with only non-sensitive fields.
+ *
+ * @param system - the backend system
+ * @returns non-sensitive system data
+ */
+export declare function toPublicView(system: BackendSystem): Record<string, unknown>;
+//# sourceMappingURL=system-store.d.ts.map

package/dist/cli/utils/system-store.js

@@ -0,0 +1,38 @@
+import { getService } from '@sap-ux/store';
+import { NullTransport, ToolsLogger } from '@sap-ux/logger';
+import { getLogger } from '../../tracing/index.js';
+/**
+ * Create a store service for BackendSystem entities.
+ * When `silentForJson` is true, uses a NullTransport logger so that store
+ * diagnostic messages do not appear on stdout before a JSON payload.
+ *
+ * @param silentForJson - suppress store log output when true
+ * @returns configured store service
+ */
+export function getSystemService(silentForJson) {
+    const logger = getLogger();
+    const storeLogger = silentForJson ? new ToolsLogger({ transports: [new NullTransport()] }) : logger;
+    return getService({
+        entityName: 'system',
+        logger: storeLogger
+    });
+}
+/**
+ * Returns a view of a BackendSystem with only non-sensitive fields.
+ *
+ * @param system - the backend system
+ * @returns non-sensitive system data
+ */
+export function toPublicView(system) {
+    return {
+        name: system.name,
+        url: system.url,
+        client: system.client,
+        systemType: system.systemType,
+        authenticationType: system.authenticationType,
+        connectionType: system.connectionType,
+        userDisplayName: system.userDisplayName,
+        hasSensitiveData: system.hasSensitiveData
+    };
+}
+//# sourceMappingURL=system-store.js.map

package/dist/common/index.d.ts

@@ -10,5 +10,5 @@ export { promptYUIQuestions } from './prompts.js';
  */
 export declare function runNpmInstallCommand(basePath: string, installArgs?: string[], options?: {
     logger?: Logger;
-}): void;
+}): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/common/index.js

@@ -1,4 +1,5 @@
 import { execNpmCommand } from '@sap-ux/project-access';
+import { t } from '../i18n.js';
 export { promptYUIQuestions } from './prompts.js';
 /**
  * Run npm install command.
@@ -10,12 +11,13 @@ export { promptYUIQuestions } from './prompts.js';
  */
 export function runNpmInstallCommand(basePath, installArgs = [], options) {
     const logger = options?.logger;
-    execNpmCommand(['install', ...installArgs], { cwd: basePath, logger: logger })
+    return execNpmCommand(['install', ...installArgs], { cwd: basePath, logger: logger })
         .then(() => {
-        logger?.info('npm install completed successfully.');
+        logger?.info(t('npm.installSuccess'));
     })
         .catch((error) => {
-        logger?.error(`npm install failed. '${error.message}'`);
+        logger?.error(t('npm.installFailed', { error: error.message }));
+        throw error;
     });
 }
 //# sourceMappingURL=index.js.map

package/dist/translations/ux-create.i18n.json

@@ -64,5 +64,65 @@
         "systemAdded": "System '{{name}}' added",
         "systemUpdated": "System '{{name}}' updated",
         "systemRemoved": "System '{{name}}' removed"
+    },
+    "migrate": {
+        "command": {
+            "description": "Migrate legacy WebIDE Fiori project to modern Fiori tools format. In BAS, a destination is required. Outside BAS, hostname and client are required; destination is optional.",
+            "options": {
+                "destination": "SAP System destination name (required in BAS)",
+                "sapSystemName": "SAP System name (alias for destination)",
+                "hostname": "Backend hostname (required outside BAS unless resolved from a saved system)",
+                "client": "SAP Client (required outside BAS unless resolved from destination or saved system)",
+                "ui5Version": "UI5 version (defaults to source project version)",
+                "force": "Force migration even if project is already a Fiori tools project",
+                "skipInstall": "Skip the `npm install` step after migration"
+            }
+        },
+        "validation": {
+            "pathUnsafe": "Path contains unsafe characters",
+            "pathNotExists": "Path does not exist: {{path}}",
+            "destinationInvalid": "Destination name must contain only letters, numbers, hyphens, and underscores",
+            "hostnameInvalid": "Invalid hostname format",
+            "clientInvalid": "SAP client must be a 3-digit number (e.g., 100)",
+            "ui5VersionInvalid": "UI5 version must follow semantic versioning format (e.g., 1.120.0)",
+            "fieldRequired": "{{fieldName}} is required",
+            "operationCancelled": "Operation cancelled by user"
+        },
+        "prompts": {
+            "confirmCurrentDir": "Migrate project at current directory: {{path}}?",
+            "enterPath": "Enter project path:",
+            "enterPathField": "Project path",
+            "alreadyMigrated": "Project appears to be already migrated to Fiori tools.",
+            "forceConfirm": "Force migration anyway?",
+            "cancelled": "Migration cancelled.",
+            "enterBASDestination": "Enter SAP Business Application Studio destination:",
+            "destinationField": "Destination",
+            "useDestination": "Use SAP System destination?",
+            "enterBTPDestination": "Enter BTP destination or SAP system name (letters, numbers, hyphens, underscores only):",
+            "enterHostname": "Enter hostname:",
+            "hostnameField": "Hostname",
+            "enterClient": "SAP Client:",
+            "clientField": "SAP Client",
+            "enterClientOptional": "SAP Client (optional, press Enter to skip):",
+            "enterUI5Version": "UI5 Version (optional, press Enter to use project default):",
+            "selectBASDestination": "Select the SAP Business Application Studio destination:",
+            "destinationChoice": "{{name}} ({{client}})",
+            "defaultClient": "default client"
+        },
+        "status": {
+            "migratingAt": "Migrating project at: {{path}}",
+            "starting": "Starting migration...",
+            "success": "✓ Migration completed successfully!",
+            "messages": "\nMessages:",
+            "skipInstallWarning": "`npm install` was skipped. Install project dependencies before running the application.",
+            "installing": "Installing project dependencies...",
+            "installFailed": "Migration completed, but dependency installation failed. Resolve the npm error above before running the project.",
+            "failed": "✗ Migration failed",
+            "failedError": "Migration failed"
+        }
+    },
+    "npm": {
+        "installSuccess": "npm install completed successfully.",
+        "installFailed": "npm install failed. '{{error}}'"
     }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sap-ux/create",
   "description": "SAP Fiori tools module to add or remove features",
-  "version": "1.4.18",
+  "version": "1.5.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/SAP/open-ux-tools.git",
@@ -35,26 +35,28 @@
     "mem-fs": "2.1.0",
     "mem-fs-editor": "9.4.0",
     "prompts": "2.4.2",
-    "@sap-ux/abap-deploy-config-inquirer": "2.0.52",
-    "@sap-ux/abap-deploy-config-writer": "1.0.31",
-    "@sap-ux/adp-tooling": "1.0.64",
-    "@sap-ux/btp-utils": "2.0.6",
-    "@sap-ux/app-config-writer": "1.1.27",
-    "@sap-ux/cap-config-writer": "1.0.43",
-    "@sap-ux/inquirer-common": "1.0.47",
+    "@sap-ux/abap-deploy-config-inquirer": "2.0.53",
+    "@sap-ux/abap-deploy-config-writer": "1.0.32",
+    "@sap-ux/adp-tooling": "1.0.65",
+    "@sap-ux/btp-utils": "2.0.7",
+    "@sap-ux/app-config-writer": "1.1.28",
+    "@sap-ux/cap-config-writer": "1.0.44",
+    "@sap-ux/inquirer-common": "1.0.48",
     "@sap-ux/logger": "1.0.3",
-    "@sap-ux/mockserver-config-writer": "1.0.22",
-    "@sap-ux/odata-service-writer": "1.0.25",
-    "@sap-ux/preview-middleware": "1.2.26",
-    "@sap-ux/project-access": "2.3.0",
-    "@sap-ux/project-input-validator": "1.0.23",
+    "@sap-ux/mockserver-config-writer": "1.0.23",
+    "@sap-ux/odata-service-writer": "1.0.26",
+    "@sap-ux/preview-middleware": "1.2.27",
+    "@sap-ux/project-access": "2.3.1",
+    "@sap-ux/project-input-validator": "1.0.24",
+    "@sap-ux/system-access": "1.0.16",
     "@sap-ux/store": "2.0.7",
-    "@sap-ux/ui5-config": "1.0.9",
-    "@sap-ux/ui5-test-writer": "1.18.1",
-    "@sap-ux/flp-config-inquirer": "1.0.64",
-    "@sap-ux/nodejs-utils": "1.0.10",
-    "@sap-ux/axios-extension": "2.1.1",
-    "@sap-ux/system-access": "1.0.15"
+    "@sap-ux/ui5-config": "1.0.10",
+    "@sap-ux/ui5-test-writer": "1.18.2",
+    "@sap-ux/fiori-migration-writer": "0.0.4",
+    "@sap-ux/feature-toggle": "1.0.5",
+    "@sap-ux/flp-config-inquirer": "1.0.65",
+    "@sap-ux/nodejs-utils": "1.0.11",
+    "@sap-ux/axios-extension": "2.1.2"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
@@ -63,7 +65,7 @@
     "@types/mem-fs": "1.1.2",
     "@types/mem-fs-editor": "7.0.1",
     "@types/prompts": "2.4.9",
-    "@sap-ux/inquirer-common": "1.0.47",
+    "@sap-ux/inquirer-common": "1.0.48",
     "@sap-ux/store": "2.0.7"
   },
   "scripts": {