@simple-auth-kit/cli 1.5.0 → 1.5.1

package/lib/copy.ts

@@ -52,7 +52,7 @@ export interface CopyOptions {
    * `cli/simple-auth-kit.ts`) — the registry source itself keeps the path that's correct for its
    * own dev/typecheck loop, where nothing has moved.
    */
-  extraRewrites?: { from: string; to: string }[];
+  extraRewrites?: { from: string | RegExp; to: string }[];
   /**
    * The previous install's sha256-by-path manifest. A destination file whose current content
    * no longer matches what was recorded is a file the user edited, and is left alone.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simple-auth-kit/cli",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "license": "MIT",
   "description": "simple-auth-kit add <combo> — copies registry source (backend combos, admin consoles, mobile apps) into a consumer repo, shadcn-CLI-style. Nothing is ever installed as a runtime dependency of the consumer.",
   "bin": {

package/registry/combos/express-prisma/variants/base/src/create-auth-app.ts

@@ -10,7 +10,7 @@ import { createAuthMiddleware } from "./middleware/auth.middleware.js";
 import { createAuthRouter } from "./routers/auth.router.js";
 import { AuthService } from "./services/auth.service.js";
 import { createAuthzMiddleware } from "./middleware/authz.middleware.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import { KeyProviderService } from "./key-provider.js";
 import { OAuthRepository } from "./repositories/oauth.repository.js";
 import { openApiSpec } from "./openapi-spec.js";

package/registry/combos/express-prisma/variants/base/src/rbac.defaults.ts

@@ -21,7 +21,7 @@
 //
 // Callers: `src/seed.ts` (`npm run seed`, the only bootstrap in this variant) and
 // `variants/base/test/variant-hooks.ts`.
-import type { PrismaClient } from "./../generated/prisma/client.js";
+import type { PrismaClient } from "../generated/prisma/client.js";
 
 /** The display metadata a seeded permission carries. `group`/`order` exist so an admin console can render a stable matrix. */
 export interface PermissionSeed {

package/registry/combos/express-prisma/variants/base/src/seed.ts

@@ -22,7 +22,7 @@
 // what gets seeded and what the routes demand cannot drift apart.
 import { PrismaPg } from "@prisma/adapter-pg";
 import { hashPassword } from "@/lib/auth/core/crypto.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import {
   DEFAULT_ROLES,
   PERMISSION_SLUGS,

package/registry/combos/express-prisma/variants/workspaces/src/create-auth-app.ts

@@ -13,7 +13,7 @@ import {
   createAuthzMiddleware,
   createWorkspaceMiddleware,
 } from "./middleware/authz.middleware.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import { KeyProviderService } from "./key-provider.js";
 import { OAuthRepository } from "./repositories/oauth.repository.js";
 import { openApiSpec } from "./openapi-spec.js";

package/registry/combos/express-prisma/variants/workspaces/src/rbac.defaults.ts

@@ -28,7 +28,7 @@
 // `src/workspace.repository.ts` (which provisions every workspace created afterwards, inside the
 // same transaction that creates it, so its creator is never locked out of a workspace they just
 // made).
-import type { PrismaClient } from "./../generated/prisma/client.js";
+import type { PrismaClient } from "../generated/prisma/client.js";
 
 /** The display metadata a seeded permission carries. `group`/`order` exist so an admin console can render a stable matrix. */
 export interface PermissionSeed {

package/registry/combos/express-prisma/variants/workspaces/src/seed.ts

@@ -29,7 +29,7 @@
 // gets, whichever path created it, and the permissions the routes demand cannot drift apart.
 import { PrismaPg } from "@prisma/adapter-pg";
 import { hashPassword } from "@/lib/auth/core/crypto.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import {
   DEFAULT_ROLES,
   PERMISSION_SLUGS,

package/registry/combos/nestjs-prisma/variants/base/src/auth.module.ts

@@ -12,7 +12,7 @@ import { AuthController } from "./controllers/auth.controller.js";
 import { AuthGuard } from "./guards/auth.guard.js";
 import { AuthService } from "./services/auth.service.js";
 import { AuthzGuard } from "./guards/authz.guard.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import { CountryRepository } from "./repositories/country.repository.js";
 import { CustomerRepository } from "./repositories/customer.repository.js";
 import { KeyProviderService } from "./key-provider.js";

package/registry/combos/nestjs-prisma/variants/base/src/rbac.defaults.ts

@@ -4,7 +4,7 @@
 // `provisionDefaultRoles` writes these rows once at seed time; from then on the database is
 // authoritative and nothing in the request path reads this file. Callers: `src/seed.ts` and
 // `variants/base/test/variant-hooks.ts`.
-import type { PrismaClient } from "./../generated/prisma/client.js";
+import type { PrismaClient } from "../generated/prisma/client.js";
 
 export interface PermissionSeed {
   displayName: string;

package/registry/combos/nestjs-prisma/variants/base/src/seed.ts

@@ -5,7 +5,7 @@
 // existing admin keeps the password they already have.
 import { PrismaPg } from "@prisma/adapter-pg";
 import { hashPassword } from "@/lib/auth/core/crypto.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import {
   DEFAULT_ROLES,
   PERMISSION_SLUGS,

package/registry/combos/nestjs-prisma/variants/workspaces/src/auth.module.ts

@@ -10,7 +10,7 @@ import { AuthController } from "./controllers/auth.controller.js";
 import { AuthGuard } from "./guards/auth.guard.js";
 import { AuthService } from "./services/auth.service.js";
 import { AuthzGuard, WorkspaceGuard } from "./guards/authz.guard.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import { CountryRepository } from "./repositories/country.repository.js";
 import { CustomerRepository } from "./repositories/customer.repository.js";
 import { KeyProviderService } from "./key-provider.js";

package/registry/combos/nestjs-prisma/variants/workspaces/src/rbac.defaults.ts

@@ -9,7 +9,7 @@
 // thing that creates a workspace — callers are `src/seed.ts` (the first workspace) and
 // `src/workspace.repository.ts` (every workspace created afterward, in the same transaction
 // that creates it).
-import type { PrismaClient } from "./../generated/prisma/client.js";
+import type { PrismaClient } from "../generated/prisma/client.js";
 
 export interface PermissionSeed {
   displayName: string;

package/registry/combos/nestjs-prisma/variants/workspaces/src/seed.ts

@@ -11,7 +11,7 @@
 // routes demand.
 import { PrismaPg } from "@prisma/adapter-pg";
 import { hashPassword } from "@/lib/auth/core/crypto.js";
-import { PrismaClient } from "./../generated/prisma/client.js";
+import { PrismaClient } from "../generated/prisma/client.js";
 import {
   DEFAULT_ROLES,
   PERMISSION_SLUGS,

package/simple-auth-kit.ts

@@ -445,24 +445,28 @@ function printPostInstallNotes(combo: ComboEntry, variant: string) {
  *
  * `generatedClientImport`: only Prisma has this — its schema's `generator { output }` is relative
  * to schema.prisma's own location, so moving prisma.config.ts/prisma/ to the project root also
- * moves the generated client. The registry source's `src/*.ts` files import it as
- * `"../generated/prisma/client.js"` — correct for the registry's own dev/typecheck loop (where
- * nothing has moved) — and installMerge rewrites that literal string in every copied file to
- * `@/prisma/client.js` instead of a computed relative path: the generated client always lands at
- * the project root regardless of how deep the importing file sits (unlike `@/lib/auth/core`,
- * whose depth actually varies with `--path`), so a fixed alias is both simpler and stable across
+ * moves the generated client. The registry source's `src/**\/*.ts` files import it with whatever
+ * relative depth is correct from their own location — `"../generated/prisma/client.js"` for a
+ * top-level file, `"../../generated/prisma/client.js"` for one nested a level deeper in
+ * controllers/services/repositories/etc — all correct for the registry's own dev/typecheck loop
+ * (where nothing has moved). installMerge rewrites *any* such relative import (matched by regex,
+ * not a fixed-depth literal string — a real bug here once: a plain string match only ever
+ * matched the top-level depth, leaving a stray leading "../" on every nested file's rewritten
+ * import) to the fixed alias `@/prisma/client.js`: the generated client always lands at the
+ * project root regardless of how deep the importing file sits (unlike `@/lib/auth/core`, whose
+ * depth actually varies with `--path`), so a fixed alias is both simpler and stable across
  * installs. The consumer adds `"@/prisma/*": ["./generated/prisma/*"]` to their tsconfig `paths`
  * once (see postInstall) — the CLI never writes tsconfig itself, same as `@/lib/auth`. Drizzle has
  * no equivalent generated artifact to redirect. */
 const ORM_LAYOUTS: {
   configFile: string;
   dataDir: string;
-  generatedClientImport?: string;
+  generatedClientImport?: RegExp;
 }[] = [
   {
     configFile: "prisma.config.ts",
     dataDir: "prisma",
-    generatedClientImport: "../generated/prisma/client.js",
+    generatedClientImport: /(?:\.\/)?(?:\.\.\/)+generated\/prisma\/client\.js/g,
   },
   { configFile: "drizzle.config.ts", dataDir: "drizzle" },
 ];
@@ -476,7 +480,7 @@ interface MergePlan {
   orm: (typeof ORM_LAYOUTS)[number] | null;
   skipFromShared: Set<string>;
   skipFromVariant: Set<string>;
-  extraRewrites: { from: string; to: string }[] | undefined;
+  extraRewrites: { from: string | RegExp; to: string }[] | undefined;
   config: SimpleAuthKitConfig;
   previous: Record<string, string>;
 }